Files
vuln-cve/data/2025/65xxx/CVE-2025-65115.json
T

444 lines
20 KiB
JSON
Raw Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2025-65115",
"assignerOrgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"state": "PUBLISHED",
"assignerShortName": "Hitachi",
"dateReserved": "2025-11-18T01:27:41.899Z",
"datePublished": "2026-04-07T05:19:50.413Z",
"dateUpdated": "2026-04-07T13:26:20.981Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "50d0f415-c707-4733-9afc-8f6c0e9b3f82",
"shortName": "Hitachi",
"dateUpdated": "2026-04-07T05:19:50.413Z"
},
"title": "Remote Code Execution Vulnerability in JP1/IT Desktop Management 2 and JP1/NETM/DM",
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"cweId": "CWE-73",
"description": "CWE-73 External control of file name or path",
"type": "CWE"
}
]
}
],
"impacts": [
{
"capecId": "CAPEC-88",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-88 OS Command Injection"
}
]
}
],
"affected": [
{
"vendor": "Hitachi",
"product": "JP1/IT Desktop Management 2 - Manager",
"platforms": [
"Windows"
],
"versions": [
{
"status": "affected",
"version": "13-50",
"lessThan": "13-50-02",
"changes": [
{
"at": "13-50-02",
"status": "unaffected"
}
],
"versionType": "custom"
},
{
"status": "affected",
"version": "13-11",
"lessThan": "13-11-04",
"changes": [
{
"at": "13-11-04",
"status": "unaffected"
}
],
"versionType": "custom"
},
{
"status": "affected",
"version": "13-10",
"lessThan": "13-10-07",
"changes": [
{
"at": "13-10-07",
"status": "unaffected"
}
],
"versionType": "custom"
},
{
"status": "affected",
"version": "13-01",
"lessThan": "13-01-07",
"changes": [
{
"at": "13-01-07",
"status": "unaffected"
}
],
"versionType": "custom"
},
{
"status": "affected",
"version": "13-00",
"lessThan": "13-00-05",
"changes": [
{
"at": "13-00-05",
"status": "unaffected"
}
],
"versionType": "custom"
},
{
"status": "affected",
"version": "12-60",
"lessThan": "12-60-12",
"changes": [
{
"at": "12-60-12",
"status": "unaffected"
}
],
"versionType": "custom"
},
{
"status": "affected",
"version": "10-50",
"lessThanOrEqual": "12-50-11",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Hitachi",
"product": "JP1/IT Desktop Management 2 - Operations Director",
"platforms": [
"Windows"
],
"versions": [
{
"status": "affected",
"version": "13-50",
"lessThan": "13-50-02",
"changes": [
{
"at": "13-50-02",
"status": "unaffected"
}
],
"versionType": "custom"
},
{
"status": "affected",
"version": "13-11",
"lessThan": "13-11-04",
"changes": [
{
"at": "13-11-04",
"status": "unaffected"
}
],
"versionType": "custom"
},
{
"status": "affected",
"version": "13-10",
"lessThan": "13-10-07",
"changes": [
{
"at": "13-10-07",
"status": "unaffected"
}
],
"versionType": "custom"
},
{
"status": "affected",
"version": "13-01",
"lessThan": "13-01-07",
"changes": [
{
"at": "13-01-07",
"status": "unaffected"
}
],
"versionType": "custom"
},
{
"status": "affected",
"version": "13-00",
"lessThan": "13-00-05",
"changes": [
{
"at": "13-00-05",
"status": "unaffected"
}
],
"versionType": "custom"
},
{
"status": "affected",
"version": "12-60",
"lessThan": "12-60-12",
"changes": [
{
"at": "12-60-12",
"status": "unaffected"
}
],
"versionType": "custom"
},
{
"status": "affected",
"version": "10-50",
"lessThanOrEqual": "12-50-11",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Hitachi",
"product": "Job Management Partner 1/IT Desktop Management 2 - Manager",
"platforms": [
"Windows"
],
"versions": [
{
"status": "affected",
"version": "10-50",
"lessThanOrEqual": "10-50-11",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Hitachi",
"product": "JP1/IT Desktop Management - Manager",
"platforms": [
"Windows"
],
"versions": [
{
"status": "affected",
"version": "09-50",
"lessThanOrEqual": "10-10-16",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Hitachi",
"product": "Job Management Partner 1/IT Desktop Management - Manager",
"platforms": [
"Windows"
],
"versions": [
{
"status": "affected",
"version": "09-50",
"lessThanOrEqual": "10-10-16",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Hitachi",
"product": "JP1/NETM/DM Manager",
"platforms": [
"Windows"
],
"versions": [
{
"status": "affected",
"version": "09-00",
"lessThanOrEqual": "10-20-02",
"changes": [
{
"at": "10-30",
"status": "unaffected"
}
],
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Hitachi",
"product": "JP1/NETM/DM Client",
"platforms": [
"Windows"
],
"versions": [
{
"status": "affected",
"version": "09-00",
"lessThanOrEqual": "10-20-02",
"changes": [
{
"at": "10-30",
"status": "unaffected"
}
],
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Hitachi",
"product": "Job Management Partner 1/Software Distribution Manager",
"platforms": [
"Windows"
],
"versions": [
{
"status": "affected",
"version": "09-00",
"lessThanOrEqual": "09-51-13",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Hitachi",
"product": "Job Management Partner 1/Software Distribution Client",
"platforms": [
"Windows"
],
"versions": [
{
"status": "affected",
"version": "09-00",
"lessThanOrEqual": "09-51-13",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}
],
"descriptions": [
{
"lang": "en",
"value": "Remote Code Execution Vulnerability in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management 2 - Operations Director on Windows, Job Management Partner 1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management - Manager on Windows, Job Management Partner 1/IT Desktop Management - Manager on Windows, JP1/NETM/DM Manager on Windows, JP1/NETM/DM Client on Windows, Job Management Partner 1/Software Distribution Manager on Windows, Job Management Partner 1/Software Distribution Client on Windows.This issue affects JP1/IT Desktop Management 2 - Manager: from 13-50 before 13-50-02, from 13-11 before 13-11-04, from 13-10 before 13-10-07, from 13-01 before 13-01-07, from 13-00 before 13-00-05, from 12-60 before 12-60-12, from 10-50 through 12-50-11; JP1/IT Desktop Management 2 - Operations Director: from 13-50 before 13-50-02, from 13-11 before 13-11-04, from 13-10 before 13-10-07, from 13-01 before 13-01-07, from 13-00 before 13-00-05, from 12-60 before 12-60-12, from 10-50 through 12-50-11; Job Management Partner 1/IT Desktop Management 2 - Manager: from 10-50 through 10-50-11; JP1/IT Desktop Management - Manager: from 09-50 through 10-10-16; Job Management Partner 1/IT Desktop Management - Manager: from 09-50 through 10-10-16; JP1/NETM/DM Manager: from 09-00 through 10-20-02; JP1/NETM/DM Client: from 09-00 through 10-20-02; Job Management Partner 1/Software Distribution Manager: from 09-00 through 09-51-13; Job Management Partner 1/Software Distribution Client: from 09-00 through 09-51-13.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "Remote Code Execution Vulnerability&nbsp;in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management 2 - Operations Director on Windows, Job Management Partner 1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management - Manager on Windows, Job Management Partner 1/IT Desktop Management - Manager on Windows, JP1/NETM/DM Manager on Windows, JP1/NETM/DM Client on Windows, Job Management Partner 1/Software Distribution Manager on Windows, Job Management Partner 1/Software Distribution Client on Windows.<p>This issue affects JP1/IT Desktop Management 2 - Manager: from 13-50 before 13-50-02, from 13-11 before 13-11-04, from 13-10 before 13-10-07, from 13-01 before 13-01-07, from 13-00 before 13-00-05, from 12-60 before 12-60-12, from 10-50 through 12-50-11; JP1/IT Desktop Management 2 - Operations Director: from 13-50 before 13-50-02, from 13-11 before 13-11-04, from 13-10 before 13-10-07, from 13-01 before 13-01-07, from 13-00 before 13-00-05, from 12-60 before 12-60-12, from 10-50 through 12-50-11; Job Management Partner 1/IT Desktop Management 2 - Manager: from 10-50 through 10-50-11; JP1/IT Desktop Management - Manager: from 09-50 through 10-10-16; Job Management Partner 1/IT Desktop Management - Manager: from 09-50 through 10-10-16; JP1/NETM/DM Manager: from 09-00 through 10-20-02; JP1/NETM/DM Client: from 09-00 through 10-20-02; Job Management Partner 1/Software Distribution Manager: from 09-00 through 09-51-13; Job Management Partner 1/Software Distribution Client: from 09-00 through 09-51-13.</p>"
}
]
}
],
"references": [
{
"url": "https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2026-118/index.html"
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV3_1": {
"version": "3.1",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH",
"baseSeverity": "HIGH",
"baseScore": 8.8,
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
}
],
"credits": [
{
"lang": "en",
"value": "Ruslan Sayfiev",
"type": "finder"
},
{
"lang": "en",
"value": "Denis Faiustov",
"type": "finder"
}
],
"source": {
"advisory": "hitachi-sec-2026-118",
"discovery": "EXTERNAL"
},
"x_generator": {
"engine": "Vulnogram 1.0.1"
}
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"timestamp": "2026-04-07T13:26:13.754013Z",
"id": "CVE-2025-65115",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-04-07T13:26:20.981Z"
}
}
]
}
}